MAL-2026-15963 Malicious code in @pilllesss/yorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a485401c140a31985b0a8f93787f167ad44cdccd111240304c858410bc0aceb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @pilllesss/yorn

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-15975 Malicious code in dcftunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884e82f2b3a290f58a48f1b1527c1b3c0494447390ab9c31f4f82544040e5709 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15943 Malicious code in 1cattunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b08759ff9575f7cea8ef2e713458337d90c27b83a76df2e43d9b9a0af2e48d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 1cattunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b08759ff9575f7cea8ef2e713458337d90c27b83a76df2e43d9b9a0af2e48d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in dcftunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884e82f2b3a290f58a48f1b1527c1b3c0494447390ab9c31f4f82544040e5709 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15995 Malicious code in multicore-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d643b52dafcb56aba0bd945697117be2a15447bcb4b183aabff3fa72824b75fb [email protected] is published under a spoofed author identity Blake Embrey, maintainer of array-flatten and advertises itself as an array utility,...

Malware in date-fns-formatter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-15969 Malicious code in array-frames (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9461945c1bccc858c52f79e13624b33fb8cdfc37c889de48907b8464779063 The npm package [email protected] advertises a trivial array chunking utility but ships an obfuscator.io-wrapped payload as its main module. On...

Malicious code in array-frames (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9461945c1bccc858c52f79e13624b33fb8cdfc37c889de48907b8464779063 The npm package [email protected] advertises a trivial array chunking utility but ships an obfuscator.io-wrapped payload as its main module. On...

MAL-2026-15991 Malicious code in jwt-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b56e3f2d5fab071637ba7688de6c2a9c3d1c1846b6ec939b82eb2c8e9ff03956 The package is published as a trivial JWT logging helper but its main module jwt-logger.js is a heavily obfuscated string-array dropper. On require, ...

Malware in array-scala

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-15970 Malicious code in array-scala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c71ee306356b5d27d673ae95bba2a24093aeac12e43044bd2503aa8c3d9024 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in array-scala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c71ee306356b5d27d673ae95bba2a24093aeac12e43044bd2503aa8c3d9024 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-15956 Malicious code in @domyjs/throttle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99fe66f1096277c1fc4cfea3b2965e728cc128aad9cd21a571b1a5b8dac45c6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/mask (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95227ac866633c8dbcb549843c31a2e58dad0d69474e065b8ec7f09fbf9bfe71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @domyjs/reactive

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @domyjs/throttle

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-15951 Malicious code in @domyjs/i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09d7898515b6bfb8ec32fadbbdb3ae21e3550dcdc0980d21d3ee909bf147bf38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @domyjs/reactive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c86a74d6abacb40b6cb20058f59cddbd922321b2d60793106da7c6cecf32055f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...